Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
File: 435f8SPqfS6DzidSDJh9A35knQM.mft (raw, json)
Hash identifier: 02b84yv5+HjkhEt6BJXlHwRBWbMp/Y16UfrU1vTtwlQ=
Subject key identifier: F2:AF:E0:F2:07:6E:52:FC:C9:9E:0D:9E:25:F3:E5:87:D3:DB:D6:CD
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Certificate issuer: /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial: 01987E2EB3A7A0944916552315CDC36DC041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
Manifest number: 10BF
Signing time: Wed 06 Aug 2025 07:00:46 +0000
Manifest this update: Wed 06 Aug 2025 07:00:46 +0000
Manifest next update: Thu 07 Aug 2025 07:00:46 +0000
Files and hashes: 1: 435f8SPqfS6DzidSDJh9A35knQM.crl (hash: ouh3NKOihO4vTRX11Z0L8B5AdvOLhAT5KhXLaJFWVZ0=)
2: tCjXyqFlakOJKQogp8h2votSD1A.roa (hash: m/O4S6Sl2dQY6fRE2qRWrRG8qwZhPhRAmDPSjwX0exE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:b3:a7:a0:94:49:16:55:23:15:cd:c3:6d:c0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Validity
Not Before: Aug 6 07:00:46 2025 GMT
Not After : Aug 7 07:00:46 2025 GMT
Subject: CN=f2afe0f2076e52fcc99e0d9e25f3e587d3dbd6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:4f:5a:f8:f5:da:c0:79:13:66:ba:9d:72:
12:56:34:34:d1:c5:2a:d4:2a:7a:a4:c1:21:60:9e:
ba:54:da:a4:ab:63:ff:e7:39:5b:ea:b8:a2:9a:53:
4e:d4:35:30:c4:b7:43:93:be:5b:a9:02:de:57:f2:
cf:dc:db:85:7f:d3:21:4c:78:97:3a:10:c6:3f:7a:
f2:ca:75:58:3a:22:b8:4e:e5:0e:6e:b1:73:4b:37:
50:26:22:53:1f:54:b6:94:9a:3b:0f:04:c8:0e:25:
01:08:52:fa:4b:8e:b8:00:b6:02:d9:9a:e5:d5:21:
7a:83:10:7b:0a:7a:c7:31:0a:92:99:f1:a5:e4:e6:
dd:e3:e6:1b:e0:ca:bf:7d:f9:2a:00:65:45:b5:2d:
74:4d:4a:be:76:b2:0b:9b:77:5b:21:84:2b:16:c6:
3e:ea:ff:fa:dd:18:20:83:bf:a9:21:27:a0:14:6e:
52:23:99:46:9a:5a:1f:64:8b:45:ee:c7:71:1d:66:
e8:80:d5:d7:f0:e3:f2:6a:6e:9b:60:03:19:67:e6:
de:98:20:29:9d:1a:a4:3c:e1:bb:d3:53:2d:c2:e2:
ff:b8:5c:03:13:a4:f0:2b:6b:15:68:06:5c:5f:d0:
3b:36:07:1d:a0:88:b0:94:32:9d:e4:23:28:9f:58:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:E0:F2:07:6E:52:FC:C9:9E:0D:9E:25:F3:E5:87:D3:DB:D6:CD
X509v3 Authority Key Identifier:
keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a4:b8:64:7d:e1:0b:70:b7:e8:c6:5e:28:7a:4e:b9:9a:8d:
9f:a7:2b:1f:67:c3:6d:3a:5b:c6:8d:91:fe:af:74:8b:a9:5a:
b3:8c:07:f2:85:e1:c9:64:4f:5f:79:8f:88:ca:4a:31:64:e4:
fd:df:6b:96:96:c9:54:00:2c:05:e8:a3:da:46:eb:5e:9a:b3:
b7:3f:c4:a5:e6:0e:1e:66:73:b5:9a:32:c7:5c:16:56:ac:0a:
7a:5a:1b:07:f3:30:01:25:77:a6:72:94:b4:e0:d0:ab:4f:75:
98:5a:d9:ee:91:97:ac:08:78:5c:06:79:fb:5a:aa:ef:fd:51:
01:6a:0d:ba:d2:85:7a:88:61:5d:a5:55:8e:77:d4:85:13:fb:
be:a5:ea:26:4d:ce:2f:8f:d0:2f:45:a8:60:2a:0c:31:3f:d9:
92:5c:42:fd:57:ba:85:3e:31:13:16:6e:81:f0:ae:9c:9a:06:
0f:de:0a:90:26:3d:77:61:aa:8d:a8:7f:8c:b4:98:d5:6a:2e:
fe:54:ea:f0:a5:f2:39:a0:f2:7d:8d:b3:05:6d:72:0d:b8:95:
7f:bd:e1:b8:f7:a0:53:8b:4e:2e:f3:34:e5:a1:69:f0:b2:05:
5a:57:50:7c:7e:cb:88:02:cc:50:56:09:62:66:35:8e:d6:67:
b5:be:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:04:37 2025 by rpki-client